b2d320802daf449026e1a1a8fa43a6b5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b2d320802daf449026e1a1a8fa43a6b5_JaffaCakes118
Size

142KB
MD5

b2d320802daf449026e1a1a8fa43a6b5
SHA1

34fcec47e71af74ee19f6c4dfc103bb27b019b69
SHA256

0a22bdbf6246464d3dfa5783fb6c6b5d8d092f4a4ab56b8c8f19085818da68c8
SHA512

d8503dd5ef89926cf7d5a9f6104d2945454a48fde94029b36074a1e9e3f628a70c48396f86cb0250d9731223903cac60532a1be2cbe9ceab9c63b397ebc059a1
SSDEEP

3072:MsQSvwQqmaOHAEGi8mQWMwNzvxMF4hmzfBARl9KwyC+Re3S:NhomaOHApPqLxyGm9AR3KwyaS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2d320802daf449026e1a1a8fa43a6b5_JaffaCakes118

Files

b2d320802daf449026e1a1a8fa43a6b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2454ca5160dd8a315b367bc18b47d70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\lhOcEafW\bcMjTlwUnsxpZ\eauixzlOhFdktj\ddaeulGZquh.pdb

Imports

user32

wvsprintfA
IsDialogMessageA
CharNextW
FrameRect
LoadCursorA
SystemParametersInfoW
MonitorFromPoint
LoadMenuW
GetMessageExtraInfo
EnableMenuItem
KillTimer
DrawStateA
CreateDialogParamA
SetCursorPos
CheckRadioButton
CheckMenuItem
ModifyMenuW
DrawFrameControl
DrawIconEx
CreateAcceleratorTableW
OemToCharBuffA
GetMonitorInfoW
CharToOemBuffA
ExitWindowsEx
GetWindowDC
ChildWindowFromPoint
LoadMenuA
ClipCursor
PostThreadMessageW
AppendMenuA
GetClassLongA
SetTimer
RegisterHotKey
GetUpdateRect
InsertMenuItemW
ScrollWindow
ShowCursor
DestroyCaret
SetClassLongW
GetClassLongW
CharUpperA
TranslateMessage
DefDlgProcA
GetDialogBaseUnits
OpenDesktopW
UpdateWindow
ReplyMessage
GetCaretPos
GetTopWindow
CallWindowProcA
VkKeyScanA
SetMenuItemInfoW
EndPaint
FindWindowA
TranslateAcceleratorA
SetDlgItemTextW
CopyImage
CharUpperW
InternalGetWindowText
wsprintfA
CharPrevA
AllowSetForegroundWindow
keybd_event
IsCharAlphaW
GetForegroundWindow
LoadAcceleratorsW
ActivateKeyboardLayout
CreateWindowExA
GetMenu
GetDlgItemInt
GetMenuItemRect
DeleteMenu
TileWindows
ShowOwnedPopups
mouse_event
DrawEdge
VkKeyScanW
EndDialog
ArrangeIconicWindows
SetForegroundWindow
GetActiveWindow
GetMenuStringA
DialogBoxIndirectParamW
SendMessageTimeoutW
GetKeyboardLayoutList
IsWindowVisible
MessageBoxA
GetKeyNameTextW
InsertMenuA
SetWindowTextA
CharLowerA
GetMenuItemCount
GetKeyboardType
ChildWindowFromPointEx
SetRectEmpty
SetWindowPlacement
GetSysColor
MessageBoxExW
CreateCaret
MapVirtualKeyW
DestroyCursor
GetWindowTextA
GetNextDlgTabItem
CharPrevW
ShowWindowAsync
GetMenuItemID
SetMenuDefaultItem
CharToOemA
IsWindowEnabled
MessageBoxExA
CreatePopupMenu
IsCharAlphaNumericW
GetScrollRange
SetFocus
SendMessageW
InvalidateRect
SetMenuItemBitmaps
ToUnicodeEx
OffsetRect
UnloadKeyboardLayout
GetKeyState
PeekMessageA
IsCharAlphaA
DialogBoxParamA

kernel32

HeapSize
CreateFileA
SetTimerQueueTimer
TransactNamedPipe
LocalReAlloc
SetThreadContext
DeleteFileA
FindNextFileW
LoadLibraryExA
GetLocaleInfoW
DuplicateHandle
SleepEx
lstrlenA
GetSystemWindowsDirectoryA
CallNamedPipeW
HeapAlloc
lstrcatW
FindFirstFileW
GetCommProperties
FormatMessageW
UnhandledExceptionFilter
SetThreadPriority
CreateSemaphoreA
FindResourceExA
ExitThread
HeapCreate
SetEndOfFile
CreateThread
lstrcpyA
GlobalCompact
GlobalAddAtomW
GetACP
OpenEventA
MulDiv
ReadFile
GetModuleHandleA
SetHandleInformation
FindFirstChangeNotificationW
GlobalFree
VirtualAlloc
HeapFree
GetTickCount
IsBadReadPtr
AddAtomA
GetLocalTime
SetCommMask
CompareStringA
SetFileAttributesW
UnmapViewOfFile
ClearCommBreak
GetModuleFileNameA
GetLongPathNameW
InitializeCriticalSection
GlobalDeleteAtom
GetCurrentThreadId
CreateFileW
GetFileInformationByHandle

msvcrt

swprintf
floor
_controlfp
system
wcstoul
isalnum
mbtowc
wcsncpy
memset
mbstowcs
iswprint
srand
rand
iswalpha
ungetc
ftell
__set_app_type
__p__fmode
strpbrk
wcstok
remove
strstr
strcpy
__p__commode
_amsg_exit
tolower
isupper
iswxdigit
_initterm
_ismbblead
strrchr
_XcptFilter
realloc
_exit
_cexit
__setusermatherr
clock
iswctype
toupper
sscanf
__getmainargs
fseek
getenv
wcspbrk
fclose
strerror
wcscat
strcspn

Exports

Exports

?ForceTriangulateA@@YGKDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reat
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uac
Size: 1KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.riat
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.byte
Size: 1024B - Virtual size: 545B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2454ca5160dd8a315b367bc18b47d70

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.reat Size: 512B - Virtual size: 121B

.uac Size: 1KB - Virtual size: 256KB

.riat Size: 6KB - Virtual size: 5KB

.byte Size: 1024B - Virtual size: 545B

.vdata Size: 512B - Virtual size: 192B

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 134KB - Virtual size: 134KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 21KB

.reat
Size: 512B - Virtual size: 121B

.uac
Size: 1KB - Virtual size: 256KB

.riat
Size: 6KB - Virtual size: 5KB

.byte
Size: 1024B - Virtual size: 545B

.vdata
Size: 512B - Virtual size: 192B

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 134KB - Virtual size: 134KB

.reloc
Size: 2KB - Virtual size: 1KB